Hi,
I have StrongSwan as both ends of a tunnel. One end is using ipsec.conf
and the other is using MySql, the later based on [0]
When the MySql side tried to initiate a connection, I get:
Jun 2 15:14:05 thing0 charon: 13[CFG] no issuer certificate found for
"C=US, O=Test, CN=test.example.com"
Jun 2 15:14:05 thing0 charon: 13[IKE] no trusted RSA public key found
for 'test.example.com'
Jun 2 15:14:05 thing0 charon: 13[ENC] generating INFORMATIONAL request
2 [ N(AUTH_FAILED) ]
The remote end likes the CA Cert and responds, so the SQL for the cert
seems correct.
On the sql side, if I put the PEM self signed CA Cert in ipsec.d/cacert
and it's key in ipsec.d/private, restart StrongSwan... the connection
does come up (the sql is not modified, the cert etc is still there.)
In the SQL, the first 3 identities are for the CA Cert; id2sql of "C=US,
O=Test, CN=test.example.com", subjectPublicKey and subjectPublicKeyInfo.
Any suggestions?
Thanks,
MikeC
[0]
http://www.strongswan.org/uml/testresults43/sql/net2net-cert/moon.ipsec.sql
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users
